You must have MAINTAIN_USERS privilege and be connected to the iidbdb database.

You must have MAINTAIN_AUDIT privilege to change security audit attributes.